Naked Security

How a bug hunter snuck into the internal networks of 35 megacorporations. Why romance scams are going stronger than ever (and how to avoid them). What to do about those tempting but treacherous "tax refund" messages. And a listener tells us how he got a bit carried away while he was gardening...

With Kimberly Truong, Doug Aamoth and Paul Ducklin

Original music by Edith Mudge

Got questions/suggestions/stories to share?

Email [email protected]

Twitter @NakedSecurity

Instagram @NakedSecurity

In this special mini-episode, Paul Ducklin talks to Sophos cybersecurity expert Chester Wisniewski about bug bounty hunting.

How does bug bounty hunting work? What should you do if you get a bug report that doesn't follow established protocol? Chester tells you how to deal with so-called "beg bounties", where self-styled "experts" beg you for money or even threaten you with ill-defined "problems" they claim to have found.

https://news.sophos.com/en-us/have-a-domain-name-beg-bounty-hunters-may-be-on-their-way

https://nakedsecurity.sophos.com/beware-of-technical-experts-bombarding-you-with-bug-reports

Original music by Edith Mudge

Got questions/suggestions/stories to share?

Email [email protected]

Twitter @NakedSecurity

Instagram @NakedSecurity

We delve into Google's tight-lipped Chrome bugfix, explain how a Belgian researcher awarded himself 111,848 cups of coffee, and discuss the audacious but thankfully temporary theft of the Perl.com domain.

With Kimberly Truong, Doug Aamoth and Paul Ducklin

Original music by Edith Mudge

Got questions/suggestions/stories to share?

Email [email protected]

Twitter @NakedSecurity

Instagram @NakedSecurity

Apple pushed out an iOS update in a hurry to shut down a serious 0-day bug. The GnuPG team scrambled to fix an ironic vulnerability that could be exploited during the very process of checking if the data you just received could be trusted. And Europol reported on a successful takedown operation against the notorious Emotet malware.

With Kimberly Truong, Doug Aamoth and Paul Ducklin

Original music by Edith Mudge

Got questions/suggestions/stories to share?

Email [email protected]

Twitter @NakedSecurity

Instagram @NakedSecurity

What's the connection between coronavirus facemasks and fingerprint biometrics? Who would have expected funky job ads on the White House website? And what would you do if you ran into a deceased former colleague on your network?

With Kimberly Truong, Doug Aamoth and Paul Ducklin

Original music by Edith Mudge

***

Got questions/suggestions/stories to share?

Email [email protected]

Twitter @NakedSecurity

Instagram @NakedSecurity

Anonymous and private, yet busted! We explain how darkweb sites sometimes keep your secrets... and sometimes don't. We help you improve your cybersecurity at home. And we tell you the tale of a company with the coolest name but allegedly with the creepiest habits coded into its browser extensions.

With Kimberly Truong, Doug Aamoth and Paul Ducklin

Original music by Edith Mudge

***

Got questions/suggestions/stories to share?

Email [email protected]

Twitter @NakedSecurity

Instagram @NakedSecurity

Thanks to coronavirus lockdown rules in the UK, and the temporary closure of all schools, Sally Adam suddenly found herself responsible for cybersecurity where it mattered more than ever: on a home network that jointly served for home, work and school.

Paul Ducklin talks to Sally about how she did it, and how to keep your own family’s digital life safe.

https://nakedsecurity.sophos.com/home-schooling-how-to-stay-secure

https://nakedsecurity.sophos.com/home-wi-fi-security-tips

Original music by Edith Mudge

***

Got questions/suggestions/stories to share?

Email [email protected]

Twitter @NakedSecurity

Instagram @NakedSecurity

We explain how two French researchers hacked a Google Titan security key (but why you don't need to panic), and dig into the Mimecast certificate compromise story to see what we can all learn from it.

With Kimberly Truong, Doug Aamoth and Paul Ducklin

Original music by Edith Mudge

***

Got questions/suggestions/stories to share?

Email [email protected]

Twitter @NakedSecurity

Instagram @NakedSecurity

We advise you how to react when a friend suddenly asks for money, explain why Chromium is finally aiming for HTTPS by default, and warn you why you should never, ever hardcode passwords into your software.

With Kimberly Truong, Doug Aamoth and Paul Ducklin.

Original music by Edith Mudge

***

Got questions/suggestions/stories to share?

Email [email protected]

Twitter @NakedSecurity

Instagram @NakedSecurity

How did the movie "Hackers" inspire a girl to grow up to become a hacker herself? Find out from security analyst, friendly hacker and TED Talk speaker Keren Elazari. Hear about Keren’s incredible journey, why hackers should be welcomed with open arms, and the inspiration that guided her career.

With Kimberly Truong and special guest Keren Elazari (@k3r3n3 on Twitter), cybersecurity analyst and researcher.

Original music by Edith Mudge

***

Got questions/suggestions/stories to share?

Email [email protected]

Twitter @NakedSecurity

Instagram @NakedSecurity